Eureka AIR delivers breakthrough ideas for toughest innovation challenges, trusted by R&D personnel around the world.

Layer two encryption for data center interconnectivity

Active Publication Date: 2010-06-17
CISCO TECH INC
View PDF18 Cites 162 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Benefits of technology

[0011]Encapsulation of the encrypted L2 data frames may include encrypting both the payload of information of the frame and the L2 header of the frame to form an encrypted L2 virtual private network frame (EL2VPNF). Encapsulation may also include adding one or more headers to the EL2VPNF to form an encapsulated EL2VPNF. This encapsulated EL2VPNF provides the flexibility of allowing multicast packets by encrypt

Problems solved by technology

Furthermore, elements may not be drawn to scale.

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • Layer two encryption for data center interconnectivity
  • Layer two encryption for data center interconnectivity
  • Layer two encryption for data center interconnectivity

Examples

Experimental program
Comparison scheme
Effect test

Embodiment Construction

[0013]References to “one embodiment”, “an embodiment”, “one example”, “an example”, and so on, indicate that the embodiment(s) or example(s) so described may include a particular feature, structure, characteristic, property, element, or limitation, but that not every embodiment or example necessarily includes that particular feature, structure, characteristic, property, element or limitation. Furthermore, repeated use of the phrase “in one embodiment” does not necessarily refer to the same embodiment, though it may.

[0014]Some portions of the detailed descriptions that follow are presented in terms of algorithms and symbolic representations of operations on data bits within a memory. These algorithmic descriptions and representations are used by those skilled in the art to convey the substance of their work to others. An algorithm, here and generally, is conceived to be a sequence of operations that produce a result. The operations may include physical manipulations of physical quant...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

PUM

No PUM Login to View More

Abstract

Systems, methods, and other embodiments associated with layer two (L2) encryption for data center interconnectivity are described. One example system includes a receive logic to receive an unencrypted L2 switched frame (UL2SF). The UL2SF may include a payload and an L2 header. The example system may also include an encryption logic to selectively encrypt the UL2SF into an encrypted frame if the UL2SF is to be sent through an L2 virtual private network (L2VPN) requiring encryption. The example system may also include a delivery logic that adds a header to the encrypted frame. The header may include data to identify a decryption function to decrypt the encrypted frame and routing information for the encrypted frame. The delivery logic may also provide the encrypted frame to the L2VPN, where the providing includes selectively sending the encrypted frame as one of, a point to point packet, and a multipoint packet.

Description

BACKGROUND[0001]Enterprises looking for ways to securely extend layer two segments between data centers for transport across public networks use encryption. To achieve encryption, enterprises first use layer 3 (L3) encapsulation. Encryption peers at both ends of the session agree on encryption parameters including, for example, encryption keys. Therefore L3 encapsulation is performed before encryption is performed. L3 encapsulation in this case creates a point to point tunnel that corresponds to encryption peers that are in agreement on how to handle the encrypted session. Tunneling then encrypting may lead to efficiency decreases because not all traffic needs to be encrypted. If the transport provides a transparent local area network (LAN) service then Internet Protocol (IP) tunneling adds an unnecessary encapsulation.BRIEF DESCRIPTION OF THE DRAWINGS[0002]The accompanying drawings, which are incorporated in and constitute a part of the specification, illustrate various example sys...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

Application Information

Patent Timeline
no application Login to View More
IPC IPC(8): H04L9/00
CPCH04L12/4633H04L63/162H04L63/0428H04L12/4666
Inventor SHENOY, SUDHAKARJABR, KHALILKANDASWAMY, SRIDARMANOHAR, MADHUSUDANANHEBBANI, SANDEEP
Owner CISCO TECH INC
Who we serve
  • R&D Engineer
  • R&D Manager
  • IP Professional
Why Eureka
  • Industry Leading Data Capabilities
  • Powerful AI technology
  • Patent DNA Extraction
Social media
Eureka Blog
Learn More
PatSnap group products